minor change; sql real escape